We're not just a product... Meet the team!

After the launch of the Threat Modeling platform under the Continuum Security brand in 2016, the company later rebranded as part of its mission to become the automated threat modeling platform, and to make threat modeling a common, yet integral part of every organisation's software development lifecycle.

Our (smiling!) Leadership Team

Stephen De Vries
Co-founder and Chief Executive Officer (CEO)

Stephen is our co-founder and CEO. He started his career as a C, C++ and Java developer, before moving into software security. He’s an active contributor to a number of OWASP projects and has helped FTSE 100 companies to build security into their development processes through threat modeling and integrated security testing.

Cristina Bentué
Co-Founder

After studying several masters in Near Eastern Studies, Cristina forged her career in technology startups between Barcelona and the City of London before co-founding IriusRisk.

Cristina is an advocate for open platforms and leads the community edition of IriusRisk to offer users a free and collaborative platform to share threat models of system architectures.

Paul Santapau
Chief Technical Officer (CTO)

Paul has been working in security for more than 15 years in both defensive and offensive roles.  His experience ranges from working in security research at the Nisu Security Research Group, building an innovation department at a startup and working as a Security Architect at big corporations. As CTO Paul’s  main responsibility is managing the engineering teams as well as supporting the introduction and scale out of new technologies that help the company growth and operation.

His passionate about working on effective and pragmatic approaches to Security and Security applied to modern development methodologies, Software Engineering and Networking.

Mark Watson
Chief Operational Officer (COO)

Mark is our COO, leading the companies growth and strategic direction. He has over 25 years experience growing software companies globally encompassing various size ranges and life stages, helping deliver numerous successful exits and a Nasdaq float.

Mark was awarded a first class honours degree, is a qualified accountant and recently completed a Strategy for the CXO course at the Cambridge Business School.

Fraser Scott
Chief Scientist

Fraser is a threat modeling product manager and evangelist. As a cyber postmodernist coming from a background of DevOps and Cloud Security, he believes that threat modeling offers a pragmatic toolkit for navigating the complex and ever-evolving intersection between software, value, and risk. He has created several experimental opensource projects including ThreatSpec and the OWASP Cloud Security project.

As VP Product, Fraser is responsible for ensuring that IriusRisk gives our customers the threat modeling solutions they need to build awesome products that are secure by design.

Bas Nijjer
Sr Vice President, International

Bas Nijjer is the Senior Vice President, International at IriusRisk and is responsible for the International markets, our GTM strategy, and driving our customers' success.

Bas is experienced in developing and leading modern go-to-market teams and strategies. His previous experience ranges from technology start-ups, scale-ups, and earlier in his career, at established multinational organizations. He has led growth teams in Europe, the USA, and other international geographies.

Sarah Wheeler
Chief People Officer (CPO)

Sarah is IriusRisk’s Chief People Officer.  Sarah is passionate about driving business success through the lens of people.  Ensuring that we can build and retain an exceptional team of professionals to solve our customers’ evolving needs, and making IriusRisk a great place to work.

Sarah joined IruisRisk in 2023, bringing over 20 years' HR experience in a diverse range of commercial environments from banking to content marketing to technology.

Sarah is MCIPD qualified with a Masters in Human Resources and a BSc in Business and Psychology.

Ryan Thornton
Marketing Director

Ryan has devoted his marketing talents to the DevOps and DevSecOps domains with decades long experience. He has been founder marketer, established brands, and created entire marketing functions.

An understanding of how to market and sell in the software development space is at the core of everything he does.